voice

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose is plausible, but its actual install and auth instructions do not align with the official Agent Voice project evidence. The biggest issue is the mismatched npm install path and undocumented command/auth model, which creates high supply-chain risk and unnecessary credential exposure for a voice-mode skill.

Confidence: 91%Severity: 81%
Audit Metadata
Analyzed At
Oct 21, 2026, 08:57 PM
Package URL
pkg:socket/skills-sh/adriancooney%2Fagent-voice%2Fvoice%2F@a053fd6c07e3ec7b85aa67e0d5e6cff3cfd65becfc8fdec740fa83fee11aa4ea